Re: Java 6u35, 7u07 are available

2012-08-31 Thread Konstantin Kolinko
2012/8/31 Konstantin Kolinko : > Hi! > > Just noting that Java 6u35, 7u07 were released by Oracle a day ago > http://www.oracle.com/technetwork/java/javase/downloads/ > > Those contain security fixes for issues exploitable when running Java > from within a web browser. (Those running it on server o

Re: Java 6u35, 7u07 are available

2012-08-31 Thread Jess Holle
Holle wrote: From: Jess Holle Subject: Re: Java 6u35, 7u07 are available To: "Tomcat Users List" Cc: "Williams, Nick" Date: Friday, August 31, 2012, 9:22 AM Well, don't give Oracle too much credit -- or grief. According to various articles (look them up, I didn't

Re: Java 6u35, 7u07 are available

2012-08-31 Thread Tony Anecito
Holle Subject: Re: Java 6u35, 7u07 are available To: "Tomcat Users List" Cc: "Williams, Nick" Date: Friday, August 31, 2012, 9:22 AM Well, don't give Oracle too much credit -- or grief. According to various articles (look them up, I didn't save the URLs)

Re: Java 6u35, 7u07 are available

2012-08-31 Thread Giles Coochey
On 31/08/2012 16:22, Jess Holle wrote: Well, don't give Oracle too much credit -- or grief. According to various articles (look them up, I didn't save the URLs), they were notified of these vulnerabilities ~4 months ago. Unfortunately several days ago serious attacks in the wild using these

Re: Java 6u35, 7u07 are available

2012-08-31 Thread Jess Holle
m: Tony Anecito [mailto:adanec...@yahoo.com] Sent: Friday, August 31, 2012 10:02 AM To: Tomcat Users List Subject: Re: Java 6u35, 7u07 are available Hi All, I looked at the release notes and there was nearly nothing there. So justification to update was impossible. Oracle needs to realize that releases

RE: Java 6u35, 7u07 are available

2012-08-31 Thread Williams, Nick
ALLY good about jumping on this issue so quickly. Nick -Original Message- From: Tony Anecito [mailto:adanec...@yahoo.com] Sent: Friday, August 31, 2012 10:02 AM To: Tomcat Users List Subject: Re: Java 6u35, 7u07 are available Hi All, I looked at the release notes and there was nearly no

Re: Java 6u35, 7u07 are available

2012-08-31 Thread Casper Wandahl Schmidt
got actual release notes when Sun owned Java. Regards, -Tony --- On Fri, 8/31/12, Konstantin Kolinko wrote: From: Konstantin Kolinko Subject: Java 6u35, 7u07 are available To: "Tomcat Users List" Date: Friday, August 31, 2012, 8:54 AM Hi! Just noting that Java 6u35, 7u07 were r

Re: Java 6u35, 7u07 are available

2012-08-31 Thread Giles Coochey
On 31/08/2012 16:02, Tony Anecito wrote: Hi All, I looked at the release notes and there was nearly nothing there. So justification to update was impossible. Oracle needs to realize that releases with just one security and one time clock change makes it impossible to explain to anyone why we n

Re: Java 6u35, 7u07 are available

2012-08-31 Thread David kerber
/12, Konstantin Kolinko wrote: From: Konstantin Kolinko Subject: Java 6u35, 7u07 are available To: "Tomcat Users List" Date: Friday, August 31, 2012, 8:54 AM Hi! Just noting that Java 6u35, 7u07 were released by Oracle a day ago http://www.oracle.com/technetwork/java/javase/downloa

Re: Java 6u35, 7u07 are available

2012-08-31 Thread Tony Anecito
inital reaction. Used to be you got actual release notes when Sun owned Java.   Regards, -Tony --- On Fri, 8/31/12, Konstantin Kolinko wrote: From: Konstantin Kolinko Subject: Java 6u35, 7u07 are available To: "Tomcat Users List" Date: Friday, August 31, 2012, 8:54 AM Hi! Just n

Java 6u35, 7u07 are available

2012-08-31 Thread Konstantin Kolinko
Hi! Just noting that Java 6u35, 7u07 were released by Oracle a day ago http://www.oracle.com/technetwork/java/javase/downloads/ Those contain security fixes for issues exploitable when running Java from within a web browser. (Those running it on server or standalone are said to be unaffected). ht